Strategic Management and Cybersecurity: A Literature Review on Enhancing Organisational Resilience in the Digital Era for Small to Medium-Sized Businesses

This review examines the theoretical and empirical literature at the intersection of strategic management and cybersecurity, and how organisations can strategically manage cybersecurity to strengthen their resilience in the digital era.The review synthesises eight components of the literature, including the theoretical foundations of strategic management; the role of strategic management in cybersecurity; cybersecurity challenges in the digital era; emerging technologies; cybersecurity incidents and business continuity; leadership and organisational culture; building organisational resilience; and best-practice frameworks.The literature consistently indicates that cyber resilience is not achieved through isolated information technology (IT) controls but through integrated strategic management that connects cyber risk, operational priorities, and business continuity.Gaps remain in the contextual literature on developing economies, where empirical evidence on the relationship between strategic management and cybersecurity remains limited.